Shop securely
Multiple award-winning and certified!
Privacy Policy
Privacy Policy
Unless otherwise stated below, you are neither legally nor contractually required to provide your personal data, and it is not necessary for entering into a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This applies only insofar as no other statement is made for the processing activities described below.
"Personal data" means any information relating to an identified or identifiable natural person.
Contact
Controller
Contact us if you wish. The controller responsible for data processing is: Michael Witgenfeld, Auguststraße, 3, 45739 Oer-erkenschwick Germany, 023688989779, ticket@medicalcorner24.com
Customer-initiated contact by email
If you initiate business contact with us by email, we collect your personal data (name, email address, message text) only to the extent you provide it. The data is processed to handle and respond to your inquiry.
If the contact is for the purpose of taking pre-contractual measures (e.g. advice where there is an interest in purchasing, preparing a quote) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If contact is made for other reasons, this data is processed on the basis of Art. 6(1)(f) GDPR in pursuit of our overriding legitimate interest in handling and responding to your inquiry. In this case, you have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR.
We use your email address only to process your inquiry. Your data will then be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form
When you use the contact form, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves the purpose of contacting you.
If the contact is for the purpose of taking pre-contractual measures (e.g. advice where there is an interest in purchasing, preparing a quote) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If you contact us for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR, due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6(1)(f) GDPR.
We use your email address only to process your inquiry. Your data will then be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the cancellation button
Customer account
When you open a customer account, we collect your personal data to the extent specified there. The data is processed for the purpose of improving your shopping experience and simplifying order processing. Processing is based on Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of your consent until withdrawal. Your customer account will then be deleted.
Reviews Advertising
Data collection when submitting a comment or review
When you comment on/rate an item or a post, we collect your personal data (name, email address, comment text) only to the extent that you provide it. The processing serves the purpose of enabling comments/ratings and displaying comments/ratings.
For the purpose of verifying your review/comment, we also collect the following data: order number, customer number, invoice number, .
By submitting the comment/review, you consent to the processing of the data submitted. The processing is based on your consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal. Your personal data will then be deleted.
When your comment/review is published, only the name you provided will be published.
Use of the Trusted Shops review system (Trustbadge)
We use the review system of Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne, on our website; “Trusted Shops”).
Trusted Shops and we are joint controllers for the collection of your data when you use the service and the transfer of this data to Trusted Shops. This is based on an agreement between us and Trusted Shops on the joint processing of personal data.
We and Trusted Shops are then equally responsible for fulfilling the obligations under the GDPR, in particular for fulfilling the information obligations under Articles 13 and 14 GDPR and for granting data subject rights under Articles 15 - 21 GDPR. You can find more information about this at https://help.etrusted.com/hc/de/article_attachments/4422901015569.
Trusted Shops enables us to collect customer reviews and display them on our website via the “Trustbadge” to give you insight into the quality of our services.
After placing an order, you may receive an invitation from us or Trusted Shops to submit a review and then submit a review. In this process, we or Trusted Shops process the following data: email address, order information (order total, order number, product purchased, if applicable). This data may also be used to verify your review.
When you access our website and the Trustbadge is displayed, we or Trusted Shops also process the following data: your IP address, the date and time of access, the amount of data transferred and the requesting provider.
The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent, provided that you have expressly consented to the disclosure of your data and receipt of the review request. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Further information on data protection at Trusted Shops can be found at: https://www.trustedshops.de/impressum-datenschutz/#datenschutz.
We use your email address to send you information and offers by newsletter, provided that you have expressly consented to this. Data processing is carried out solely for the purpose of advertising. For this purpose, we process your email address and, where applicable, other data that you voluntarily provided when subscribing to our newsletter.
The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
You can unsubscribe from the newsletter at any time by using the relevant link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. Despite being removed from the mailing list, we may continue to store your email address on a so-called blacklist to prevent you from receiving newsletter emails from us in the future. This storage is based on Art. 6(1)(f) GDPR, arising from our and your legitimate interest in preventing the reuse of your email address to send you our newsletter. You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you.
Use of the email address for sending direct advertising
We use your email address, which we received in connection with the sale of a product or service, to send you electronic advertising for our own products or services that are similar to those you have already purchased from us, unless you have objected to this use. Providing your email address is required to conclude the contract. If you do not provide it, no contract can be concluded. Processing is based on Art. 6(1)(f) GDPR, reflecting our overriding legitimate interest in direct advertising. You may object to this use of your email address at any time by notifying us. You can find the contact details for exercising your right to object in the legal notice. You may also use the link provided for this purpose in the advertising email. You will incur no costs other than the transmission costs at the basic rates.
Use of Klaviyo
We use the services of Klaviyo Inc. (125 Summer St Floor 7, Boston, MA 02111, USA; “Klaviyo”) for sending the newsletter under a data processing agreement.
We pass on to Klaviyo the information you provided when subscribing to the newsletter (email address and, where applicable, first and last name). The data is processed for the purpose of sending the newsletter and statistically evaluating it.
To evaluate newsletter campaigns, the newsletters sent contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This enables us to determine whether you have opened the newsletter and whether you have clicked any links included in it. In this context, we collect your personal data, such as your IP address, browser type and device, and the time. Usage profiles may be created from this data under a pseudonym. The data collected is not used to identify you personally. The data collected is used solely for the statistical evaluation and improvement of newsletter campaigns.
Your data is generally transferred to Klaviyo servers in the USA and stored there. The European Commission has adopted an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Klaviyo has certified under the TADPF and thereby undertaken to comply with European data protection principles.
Your personal data is processed on the basis of Art. 6 para. 1 lit. f GDPR, in pursuit of our overriding legitimate interest in a targeted, effective and user-friendly newsletter system. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.
Further information about data protection at Klaviyo is available at https://www.klaviyo.com/legal/privacy-notice and at https://www.klaviyo.com/legal/data-processing-agreement.
Use of an external inventory management system
To process contracts, we use an inventory management system under a data processing agreement. For this purpose, your personal data collected in connection with the order is transmitted to
JTL-Software-GmbH, Rheinstr. 7, 41836 Hückelhoven
transmitted.
Your personal data is processed for the purpose of fulfilling the contract concluded with you and on the basis of Art. 6 para. 1 lit. b GDPR.
Payment service provider Credit report
Use of PayPal Express
We use the PayPal Express payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of enabling us to offer you payment through the PayPal Express payment service.
To integrate this payment service, PayPal must collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, and location of your device) when you visit the website. Cookies may also be used for this purpose. Cookies enable your browser to be recognized.
The use of cookies or similar technologies takes place with your consent on the basis of § 25(1) S. 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.
If you select and use PayPal Express, the data required to process the payment is transmitted to PayPal so that we can fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.
For more information about data processing when using the PayPal Express payment service, please see the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS
Use of PayPal Check-Out
We use the PayPal Check-Out payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of enabling us to offer you payment through the payment service. If you select and use payment via PayPal, credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, the data required to process the payment is transmitted to PayPal so that we can fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.
Cookies may be stored for this purpose, enabling your browser to be recognized. The data processing that takes place as a result is carried out on the basis of Art. 6 para. 1 lit. f GDPR, on the grounds of our overriding legitimate interest in offering a range of payment methods that is customer-oriented. You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data concerning you.
Credit card via PayPal, direct debit via PayPal & “Pay Later” via PayPal
For certain payment methods, such as credit card via PayPal, direct debit via PayPal or “Pay Later” via PayPal, PayPal reserves the right, where applicable, to obtain a credit report based on mathematical-statistical procedures using credit reference agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit reference agency and uses the information received about the statistical probability of payment default to make a balanced decision on establishing, performing or terminating the contractual relationship. The credit report may include probability values (score values), calculated on the basis of scientifically recognized mathematical-statistical procedures, which take address data into account, among other things. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of checking creditworthiness in preparation for a contract. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR, on the grounds of our overriding legitimate interest in protection against payment default when PayPal advances payment.
You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data concerning you based on Art. 6 para. 1 lit. f GDPR by notifying PayPal. The provision of the data is necessary to conclude the contract using the payment method you have requested. Failure to provide the data means that the contract cannot be concluded using the payment method you have chosen.
Third-party providers
When paying using a third-party payment method, the data required to process the payment is transmitted to PayPal. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. To provide this payment method, PayPal may then pass the data on to the relevant provider. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Local third-party providers may include:
Invoice purchase via PayPal
When paying by invoice, the data required to process the payment is initially transmitted to PayPal. To process this payment method, PayPal then transmits the data to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") so that it can fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Ratepay may conduct a credit check based on mathematical-statistical procedures (probability or score values), using credit agencies, following the process already described above. The data processing serves the purpose of assessing creditworthiness in preparation for entering into a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR in our overriding legitimate interest in protecting against payment default when Ratepay pays in advance. For more information about data protection and the credit agencies used by Ratpay, please see https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.
For more information about data processing when using PayPal, please see the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Use of Amazon Payments
We use the Amazon Payments payment service on our website, provided by Amazon Payments Europe s.c.a. (38 avenue John F. Kennedy, L-1855 Luxembourg; “Amazon Payments”).
The data processing serves the purpose of enabling us to offer you payment through the Amazon Payments payment service.
To integrate this payment service, Amazon Payments must collect, store, and analyze data when the website is accessed (e.g., IP address, device type, operating system, browser type, and your device’s location). Cookies may also be used for this purpose. The cookies enable your browser to be recognized.
Your personal data is processed on the basis of Art. 6(1)(f) GDPR in our overriding legitimate interest in offering various payment methods in a customer-oriented manner. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.
By selecting and using “Amazon Payments”, the data required to process the payment is transmitted to Amazon Payments so that the contract with you can be performed using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.
Further information on data processing when using the Amazon Payments payment service can be found in the associated privacy policy at: https://pay.amazon.com/de/help/201212490
The processing is carried out on the basis of Article 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.
As part of the identity check, you consent to your personal data being transmitted by Paymorrow to SCHUFA Holding AG (Kormoranweg 5, 65201 Wiesbaden; "SCHUFA") for the purpose of verifying your identity. SCHUFA will then transmit back to Paymorrow the degree of correspondence, expressed as a percentage, between the personal details it has stored and the personal details you have provided, as well as, where applicable, a notice of a previous identity verification based on an identification document conducted by SCHUFA or another contractual partner. Paymorrow can therefore use the correspondence rates transmitted to determine whether a person with the address you provided is recorded in SCHUFA’s database. No further data exchange or transmission of differing addresses takes place, and your data is not stored in SCHUFA’s database. Only the fact that the address was checked with SCHUFA is stored for evidentiary purposes.
The following personal data is required from you to carry out the creditworthiness check as part of the acceptance review: form of address, first and last names; place of residence (street, house number, postal code, town/city); date of birth; telephone number. The use, processing and disclosure of the aforementioned personal data by the online shop operator and Paymorrow, as well as the disclosure of this data by Paymorrow to the aforementioned credit reference agencies for the purpose of checking your creditworthiness, requires your consent.
You will therefore be asked during the ordering process to consent to the storage, processing and use of your personal data by the online shop operator or Paymorrow for the purpose of checking your creditworthiness and to the disclosure of this data to credit reference agencies, including the disclosure of data to third parties.
Paymorrow reserves the right to transfer personal data to service providers or financial partners commissioned by Paymorrow, or to grant them access to such data, for the purposes stated above, insofar as this is necessary for them to perform their tasks.
We fully respect the customer’s decision not to give consent. In this case, however, neither the online shop operator nor Paymorrow can accommodate the customer’s request to purchase on invoice.
For the purpose of creditworthiness checks, Paymorrow or partner companies commissioned by Paymorrow may, within the limits permitted by law and taking into account your respective legitimate interests in preventing the transmission or use of your data, transmit your address details to credit reference agencies for creditworthiness and credit checks when you register for purchase on invoice. We obtain information about the customer’s previous purchasing and payment behavior and creditworthiness information based on mathematical-statistical methods using address data (scoring - to calculate payment probabilities) for the purpose of creditworthiness and credit checks from the following credit reference agencies, which store data for providing information:
Bürgel, Bürgel Wirtschaftsinformationen GmbH & Co. KG, Gasstraße 18, D-22761 Hamburg, Tel.: +49 (0) 40 - 89 80 3 - 0, Fax: -777;
CEG, Creditreform Consumer GmbH, Hellersbergstr. 11, D-41460 Neuss, Tel.:+49(0)2131-109-501, Fax: -557;
Deltavista, Deltavista GmbH, Freisinger Landstr. 74, D-80939 München, Tel.: +49 (0)89 - 7244880, Fax: - 22;
infoscore Consumer Data GmbH, Data Protection Department, Rheinstraße 99, D-76532 Baden-Baden, Fax: +49 (7221) 5040-3201;
"Real" Inform GmbH, Normannenweg 32, 20537 Hamburg, Fax: +49 40 23 88 14-59.
You may request information about the data stored about you by the respective credit reference agencies from the agencies named. Data concerning the conclusion of the contract, the application, the commencement and/or termination of a contractual relationship may also be transmitted to the agencies named. The online shop operator / Paymorrow may also notify the agencies of any conduct that does not comply with the contract. The agencies store this data so that, upon credible demonstration of a legitimate interest, they can provide their contractual partners with information to assess customers’ creditworthiness or about a customer’s address for the purpose of locating debtors. Paymorrow ensures that the credit reference agencies named process and/or use your personal data exclusively for the purpose of “creditworthiness and credit checks.”
Cookies
Our website uses cookies. Cookies are small text files that are stored in a user's computer system by or in the Internet browser. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.
We use the “Shopify Privacy & Compliance” consent tool provided by Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. Shopify is an affiliated company of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The tool enables you to give consent to data processing via the website, in particular to the placement of cookies, and to exercise your right to withdraw consent already given. The data is processed for the purpose of obtaining and documenting the necessary consent to data processing and thereby complying with legal obligations. Cookies may be used for this purpose. User information, including your IP address, is collected and transmitted to Shopify.
Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. An adequacy decision by the European Commission exists for Canada. An adequacy decision by the European Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those set out in the European Commission’s standard contractual clauses.
The data is processed to fulfill a legal obligation on the basis of Art. 6(1)(c) GDPR.
For more information about data protection at Shopify, please visit https://www.shopify.com/de/legal/datenschutz.
Analytics Advertising tracking
Use of Google Analytics 4
We use the Google Analytics web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data processing serves the purpose of analyzing this website and its visitors, as well as for marketing and advertising purposes. To this end, Google will use the information collected on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity, and provide the website operator with other services related to website and internet use.
This may include collecting the following information, among other things: IP address, date and time of the page visit, click path, information about the browser and device you use, pages visited, referrer URL (website from which you accessed our website), location data, and purchasing activities. Google may link your data with other data, such as your search history, personal accounts, usage data from other devices, and all other data Google has about you.
Google truncates the IP address beforehand within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area.
Your personal data is processed with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
The information generated thereby about your use of this website is generally transferred to and stored on a Google server in the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has thereby undertaken to comply with European data protection principles. Both Google and US government authorities have access to your data.
For more information about the terms of use and data protection, please visit https://policies.google.com/technologies/partner-sites and https://policies.google.com/privacy?hl=de&gl=de and at https://business.safety.google/privacy/.
Plug-ins and Other
We use the reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website as part of data processing under a data processing agreement. The query is intended to distinguish between input by a human and input by automated, machine processing. For this purpose, your input is transmitted to Google and further processed there. In addition, your IP address and, where applicable, other data required by Google for the reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and may also be transmitted to servers of Google LLC in the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 (1) S. 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 (1) (a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent up to the time of withdrawal.
Use of YouTube
We use the function for embedding YouTube videos provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”) on our website. YouTube is an affiliated company of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
The function displays videos hosted on YouTube in an iFrame on the website. The “Enhanced Privacy Mode” option is enabled. As a result, YouTube does not store any information about visitors to the website. Information is only transmitted to YouTube and stored there when you watch a video. Your data may be transferred to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 (1) S. 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 (1) (a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent up to the time of withdrawal.
For more information about the collection and use of data by YouTube and Google, your related rights and options for protecting your privacy, please see YouTube's privacy policy at https://www.youtube.com/t/privacy.
Embedding of the idealo logo
Our partner idealo's logo (idealo internet GmbH, Ritterstraße 11, 10969 Berlin) is embedded on our website. When you visit our website, the browser on your device automatically sends information to idealo's server. This information is temporarily stored in a so-called server log file for 7 days. The following information is collected without any action on your part and stored until it is automatically deleted:
Use of Pushly
We use the Pushly plug-in from WebLab GmbH (Großbeerenstraße 169-171, 12277 Berlin; "Pushly") on our website.
The purpose of the data processing is to convert our online shop into an Android or iOS app. For this purpose, the following data of yours, which we receive in particular through your input during the ordering process, is transmitted to Pushly and temporarily stored on Pushly's servers within the EU: name, email address, customer ID, order number, payment method, billing and delivery address. Your data is not shared with any other third parties.
The processing of your personal data is carried out on the basis of Art. 6 para. 1 lit. f GDPR, in pursuit of our overriding legitimate interest in providing our services in a customer-oriented and user-friendly manner. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.
Further information about data protection at Pushly can be found at: https://www.pushly.de/datenschutz
Data subject rights and storage period
Storage period
After the contract has been fully performed, the data will initially be stored for the duration of the warranty period, then, taking into account statutory retention periods, in particular those under tax and commercial law, and will then be deleted once those periods have expired, unless you have consented to further processing and use.
Rights of the data subject
If the statutory requirements are met, you have the following rights pursuant to Art. 15 to 20 GDPR: the right of access, rectification, erasure, restriction of processing, and data portability.
Furthermore, pursuant to Art. 21(1) GDPR, you have the right to object to processing based on Art. 6(1)(f) GDPR, as well as to processing for the purposes of direct marketing.
Right to lodge a complaint with the supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.
You may lodge a complaint, among other things, with the supervisory authority responsible for us, which you can contact using the following details:
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
P.O. Box 20 04 44
40102 Düsseldorf
Tel.: +49 211 384240
Fax: +49 211 38424999
Email: poststelle@ldi.nrw.de
Right to object
If the personal data processing activities listed here are based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right to object to these processing activities at any time, on grounds relating to your particular situation, with effect for the future.
Once you have objected, the processing of the data concerned will cease, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims.
If personal data is processed for the purposes of direct marketing, you may object to this processing at any time by notifying us. Once you have objected, we will cease processing the data concerned for the purposes of direct marketing.
Unless otherwise stated below, you are neither legally nor contractually required to provide your personal data, and it is not necessary for entering into a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This applies only insofar as no other statement is made for the processing activities described below.
"Personal data" means any information relating to an identified or identifiable natural person.
Server log files
You can visit our websites without providing any personal information.
Whenever you access our website, usage data is transmitted to us or our web host/IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider.
Processing is carried out on the basis of Art. 6(1)(f) GDPR in pursuit of our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our services.
Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. An adequacy decision by the European Commission exists for Canada. An adequacy decision by the European Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those set out in the European Commission’s standard contractual clauses.Processing is carried out on the basis of Art. 6(1)(f) GDPR in pursuit of our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our services.
Contact
Controller
Contact us if you wish. The controller responsible for data processing is: Michael Witgenfeld, Auguststraße, 3, 45739 Oer-erkenschwick Germany, 023688989779, ticket@medicalcorner24.com
Customer-initiated contact by email
If you initiate business contact with us by email, we collect your personal data (name, email address, message text) only to the extent you provide it. The data is processed to handle and respond to your inquiry.
If the contact is for the purpose of taking pre-contractual measures (e.g. advice where there is an interest in purchasing, preparing a quote) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If contact is made for other reasons, this data is processed on the basis of Art. 6(1)(f) GDPR in pursuit of our overriding legitimate interest in handling and responding to your inquiry. In this case, you have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR.
We use your email address only to process your inquiry. Your data will then be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form
When you use the contact form, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves the purpose of contacting you.
If the contact is for the purpose of taking pre-contractual measures (e.g. advice where there is an interest in purchasing, preparing a quote) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If you contact us for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR, due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6(1)(f) GDPR.
We use your email address only to process your inquiry. Your data will then be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the cancellation button
If you cancel a subscription contract concluded via our online presence using the legally required cancellation button (“cancellation button”), we process the data you enter in the confirmation form. When you use the cancellation button, we collect your personal data (name, email address, telephone number if applicable, details to identify the contract you wish to cancel, and the time (date and time) the cancellation declaration was sent) only to the extent you provide it. The data processing serves the purpose of providing you with the legally required option to cancel your continuing obligation contract and of properly processing your cancellation.
If the contact concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR. Otherwise, the data processing is carried out on the basis of Art. 6(1)(c) GDPR, as we are legally required to provide you with a cancellation button on our online presence.
We use your email address only to process your notice of termination. Your data will then be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing of applications by email
Visitors to the website who are interested in vacancies advertised on our website may apply by email. In this process, we collect your personal data only to the extent you provide it. This includes your contact details (e.g. name, email address, telephone number), information about your professional qualifications and education, information about professional development, and performance-related certificates.
The data processing serves the purpose of contacting you and deciding whether to establish an employment relationship with you. Providing the data is necessary to conduct the application process. Your personal data is processed on the basis of Art. 6(1)(b) GDPR in conjunction with Section 26(1) BDSG for the purpose of carrying out pre-contractual measures (conducting the application process as part of initiating an employment contract).
If you have given us your consent to process personal data for inclusion in our applicant pool, for example by ticking a checkbox, the processing is carried out on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
If special categories of personal data within the meaning of Art. 9(1) GDPR are requested from applicants as part of the application process, such as information on the degree of severe disability, this is done on the basis of Art. 9(2)(b) GDPR so that we can exercise the rights arising from employment law and the law on social security and social protection, and fulfil our obligations in this regard.
We store your personal data for as long as necessary to make a decision regarding your application. Your data will then be deleted no later than six months later, unless you have consented to further processing and use. If an employment relationship is established following the application process, the data provided will continue to be processed for the purposes of carrying out the employment relationship on the basis of Art. 6(1)(b) GDPR in conjunction with Section 26(1) BDSG and will subsequently be transferred to your personnel file.
Customer account Orders Customer account
When you open a customer account, we collect your personal data to the extent specified there. The data is processed for the purpose of improving your shopping experience and simplifying order processing. Processing is based on Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of your consent until withdrawal. Your customer account will then be deleted.
Collection, processing, and disclosure of personal data when placing orders
When you place an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and handle your inquiries. Providing the data is necessary to conclude the contract. Failure to provide the data means that no contract can be concluded. Processing is based on Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.
Your data may, for example, be disclosed to shipping companies, dropshipping or fulfillment providers, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly comply with the statutory requirements. The amount of data transferred is limited to the minimum necessary.
Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. An adequacy decision by the European Commission exists for Canada. An adequacy decision by the European Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those set out in the European Commission’s standard contractual clauses.Reviews Advertising
Data collection when submitting a comment or review
When you comment on/rate an item or a post, we collect your personal data (name, email address, comment text) only to the extent that you provide it. The processing serves the purpose of enabling comments/ratings and displaying comments/ratings.
For the purpose of verifying your review/comment, we also collect the following data: order number, customer number, invoice number, .
By submitting the comment/review, you consent to the processing of the data submitted. The processing is based on your consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal. Your personal data will then be deleted.
When your comment/review is published, only the name you provided will be published.
Use of the Trusted Shops review system (Trustbadge)
We use the review system of Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne, on our website; “Trusted Shops”).
Trusted Shops and we are joint controllers for the collection of your data when you use the service and the transfer of this data to Trusted Shops. This is based on an agreement between us and Trusted Shops on the joint processing of personal data.
We and Trusted Shops are then equally responsible for fulfilling the obligations under the GDPR, in particular for fulfilling the information obligations under Articles 13 and 14 GDPR and for granting data subject rights under Articles 15 - 21 GDPR. You can find more information about this at https://help.etrusted.com/hc/de/article_attachments/4422901015569.
Trusted Shops enables us to collect customer reviews and display them on our website via the “Trustbadge” to give you insight into the quality of our services.
After placing an order, you may receive an invitation from us or Trusted Shops to submit a review and then submit a review. In this process, we or Trusted Shops process the following data: email address, order information (order total, order number, product purchased, if applicable). This data may also be used to verify your review.
When you access our website and the Trustbadge is displayed, we or Trusted Shops also process the following data: your IP address, the date and time of access, the amount of data transferred and the requesting provider.
The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent, provided that you have expressly consented to the disclosure of your data and receipt of the review request. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Further information on data protection at Trusted Shops can be found at: https://www.trustedshops.de/impressum-datenschutz/#datenschutz.
Review reminder
After your order, we would like to ask you to review your purchase from us.
For this purpose, we use your personal data (name, email address, order information), independently of the performance of the contract, to send you an email reminder to leave a review after you have placed an order, provided that you have expressly consented to this.
The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by using the relevant link in the email or by notifying us, without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Use of the email address to send newslettersAfter your order, we would like to ask you to review your purchase from us.
For this purpose, we use your personal data (name, email address, order information), independently of the performance of the contract, to send you an email reminder to leave a review after you have placed an order, provided that you have expressly consented to this.
The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by using the relevant link in the email or by notifying us, without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
We use your email address to send you information and offers by newsletter, provided that you have expressly consented to this. Data processing is carried out solely for the purpose of advertising. For this purpose, we process your email address and, where applicable, other data that you voluntarily provided when subscribing to our newsletter.
The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
You can unsubscribe from the newsletter at any time by using the relevant link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. Despite being removed from the mailing list, we may continue to store your email address on a so-called blacklist to prevent you from receiving newsletter emails from us in the future. This storage is based on Art. 6(1)(f) GDPR, arising from our and your legitimate interest in preventing the reuse of your email address to send you our newsletter. You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you.
Use of the email address for sending direct advertising
We use your email address, which we received in connection with the sale of a product or service, to send you electronic advertising for our own products or services that are similar to those you have already purchased from us, unless you have objected to this use. Providing your email address is required to conclude the contract. If you do not provide it, no contract can be concluded. Processing is based on Art. 6(1)(f) GDPR, reflecting our overriding legitimate interest in direct advertising. You may object to this use of your email address at any time by notifying us. You can find the contact details for exercising your right to object in the legal notice. You may also use the link provided for this purpose in the advertising email. You will incur no costs other than the transmission costs at the basic rates.
Use of Klaviyo
We use the services of Klaviyo Inc. (125 Summer St Floor 7, Boston, MA 02111, USA; “Klaviyo”) for sending the newsletter under a data processing agreement.
We pass on to Klaviyo the information you provided when subscribing to the newsletter (email address and, where applicable, first and last name). The data is processed for the purpose of sending the newsletter and statistically evaluating it.
To evaluate newsletter campaigns, the newsletters sent contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This enables us to determine whether you have opened the newsletter and whether you have clicked any links included in it. In this context, we collect your personal data, such as your IP address, browser type and device, and the time. Usage profiles may be created from this data under a pseudonym. The data collected is not used to identify you personally. The data collected is used solely for the statistical evaluation and improvement of newsletter campaigns.
Your data is generally transferred to Klaviyo servers in the USA and stored there. The European Commission has adopted an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Klaviyo has certified under the TADPF and thereby undertaken to comply with European data protection principles.
Your personal data is processed on the basis of Art. 6 para. 1 lit. f GDPR, in pursuit of our overriding legitimate interest in a targeted, effective and user-friendly newsletter system. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.
Further information about data protection at Klaviyo is available at https://www.klaviyo.com/legal/privacy-notice and at https://www.klaviyo.com/legal/data-processing-agreement.
Use of the email address for availability notifications
We offer an item availability notification service on our website. If an item is temporarily unavailable, you can enter your email address on the relevant item page and, if you have consented, we will notify you by email when it becomes available. Once the item is available, you will receive a one-time email notification of its availability. The processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal. You may unsubscribe from availability notifications at any time by notifying us. Your email address will then be removed from the mailing list.
Inventory management We offer an item availability notification service on our website. If an item is temporarily unavailable, you can enter your email address on the relevant item page and, if you have consented, we will notify you by email when it becomes available. Once the item is available, you will receive a one-time email notification of its availability. The processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal. You may unsubscribe from availability notifications at any time by notifying us. Your email address will then be removed from the mailing list.
Use of an external inventory management system
To process contracts, we use an inventory management system under a data processing agreement. For this purpose, your personal data collected in connection with the order is transmitted to
JTL-Software-GmbH, Rheinstr. 7, 41836 Hückelhoven
transmitted.
Your personal data is processed for the purpose of fulfilling the contract concluded with you and on the basis of Art. 6 para. 1 lit. b GDPR.
Payment service provider Credit report
Use of PayPal Express
We use the PayPal Express payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of enabling us to offer you payment through the PayPal Express payment service.
To integrate this payment service, PayPal must collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, and location of your device) when you visit the website. Cookies may also be used for this purpose. Cookies enable your browser to be recognized.
The use of cookies or similar technologies takes place with your consent on the basis of § 25(1) S. 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.
If you select and use PayPal Express, the data required to process the payment is transmitted to PayPal so that we can fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.
For more information about data processing when using the PayPal Express payment service, please see the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS
Use of PayPal Check-Out
We use the PayPal Check-Out payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of enabling us to offer you payment through the payment service. If you select and use payment via PayPal, credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, the data required to process the payment is transmitted to PayPal so that we can fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.
Cookies may be stored for this purpose, enabling your browser to be recognized. The data processing that takes place as a result is carried out on the basis of Art. 6 para. 1 lit. f GDPR, on the grounds of our overriding legitimate interest in offering a range of payment methods that is customer-oriented. You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data concerning you.
Credit card via PayPal, direct debit via PayPal & “Pay Later” via PayPal
For certain payment methods, such as credit card via PayPal, direct debit via PayPal or “Pay Later” via PayPal, PayPal reserves the right, where applicable, to obtain a credit report based on mathematical-statistical procedures using credit reference agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit reference agency and uses the information received about the statistical probability of payment default to make a balanced decision on establishing, performing or terminating the contractual relationship. The credit report may include probability values (score values), calculated on the basis of scientifically recognized mathematical-statistical procedures, which take address data into account, among other things. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of checking creditworthiness in preparation for a contract. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR, on the grounds of our overriding legitimate interest in protection against payment default when PayPal advances payment.
You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data concerning you based on Art. 6 para. 1 lit. f GDPR by notifying PayPal. The provision of the data is necessary to conclude the contract using the payment method you have requested. Failure to provide the data means that the contract cannot be concluded using the payment method you have chosen.
Third-party providers
When paying using a third-party payment method, the data required to process the payment is transmitted to PayPal. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. To provide this payment method, PayPal may then pass the data on to the relevant provider. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Local third-party providers may include:
- Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
Invoice purchase via PayPal
When paying by invoice, the data required to process the payment is initially transmitted to PayPal. To process this payment method, PayPal then transmits the data to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") so that it can fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Ratepay may conduct a credit check based on mathematical-statistical procedures (probability or score values), using credit agencies, following the process already described above. The data processing serves the purpose of assessing creditworthiness in preparation for entering into a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR in our overriding legitimate interest in protecting against payment default when Ratepay pays in advance. For more information about data protection and the credit agencies used by Ratpay, please see https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.
For more information about data processing when using PayPal, please see the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Use of Amazon Payments
We use the Amazon Payments payment service on our website, provided by Amazon Payments Europe s.c.a. (38 avenue John F. Kennedy, L-1855 Luxembourg; “Amazon Payments”).
The data processing serves the purpose of enabling us to offer you payment through the Amazon Payments payment service.
To integrate this payment service, Amazon Payments must collect, store, and analyze data when the website is accessed (e.g., IP address, device type, operating system, browser type, and your device’s location). Cookies may also be used for this purpose. The cookies enable your browser to be recognized.
Your personal data is processed on the basis of Art. 6(1)(f) GDPR in our overriding legitimate interest in offering various payment methods in a customer-oriented manner. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.
By selecting and using “Amazon Payments”, the data required to process the payment is transmitted to Amazon Payments so that the contract with you can be performed using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.
Further information on data processing when using the Amazon Payments payment service can be found in the associated privacy policy at: https://pay.amazon.com/de/help/201212490
Use of Klarna payment options
We use the payment service provided by Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; “Klarna”) on our website. By selecting and using payment via Klarna, the data required to process the payment is transmitted to Klarna so that we can perform the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
Cookies may be stored in this process, enabling your browser to be recognized. The resulting data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR, in pursuit of our overriding legitimate interest in offering a customer-oriented selection of payment methods. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.
Cookies may be stored in this process, enabling your browser to be recognized. The resulting data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR, in pursuit of our overriding legitimate interest in offering a customer-oriented selection of payment methods. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.
“Pay Later” (invoice), “Pay Now” (payment by direct debit, credit card, or instant bank transfer), “Financing” (payment in installments)
For individual payment methods such as “Pay Later” (invoice), “Pay Now” (payment by direct debit, credit card, instant bank transfer), “Financing” (payment in installments), Klarna reserves the right, where applicable, to obtain a credit report based on mathematical and statistical methods using credit reference agencies.
For this purpose, Klarna transmits the personal data required for a credit check, such as first and last name, address, gender, email address, IP address and data relating to the order, to a credit reference agency for the purposes of identity and credit checks, and uses the information received about the statistical probability of payment default to make a balanced decision on the establishment, performance or termination of the contractual relationship. The credit report may contain probability values (score values) calculated on the basis of scientifically recognized mathematical and statistical methods, which may include address data in their calculation. Your interests worthy of protection are taken into account in accordance with the statutory provisions. The data processing serves the purpose of conducting a credit check in connection with the initiation of a contract. Processing is carried out on the basis of Art. 6(1)(f) GDPR, on the basis of our overriding legitimate interest in protecting against payment defaults when Klarna makes advance payments. You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6(1)(f) GDPR by notifying Klarna. Provision of the data is necessary to conclude the contract using the payment method you have selected. If you do not provide the data, the contract cannot be concluded using the payment method you have selected.
Further information, in particular about which credit reference agencies Klarna discloses your personal data to, is available at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies.
General information about Klarna is available at: https://www.klarna.com/de/. Klarna processes your personal data in accordance with the applicable data protection provisions and as set out in Klarna’s privacy policy at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.
Use of Klarna payment options
We use the payment service provided by Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; “Klarna”) on our website. By selecting and using payment via Klarna, the data required to process the payment is transmitted to Klarna so that we can perform the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
Cookies may be stored in this process, enabling your browser to be recognized. The resulting data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR, in pursuit of our overriding legitimate interest in offering a customer-oriented selection of payment methods. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.
Cookies may be stored in this process, enabling your browser to be recognized. The resulting data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR, in pursuit of our overriding legitimate interest in offering a customer-oriented selection of payment methods. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.
“Pay Later” (invoice), “Pay Now” (payment by direct debit, credit card, or instant bank transfer), “Financing” (payment in installments)
For individual payment methods such as “Pay Later” (invoice), “Pay Now” (payment by direct debit, credit card, or instant bank transfer), and “Financing” (payment in installments), Klarna reserves the right, where applicable, to obtain a credit report based on mathematical-statistical methods using credit reference agencies.
For this purpose, Klarna transmits the personal data required for a credit check, such as first and last name, address, gender, email address, IP address, and data relating to the order, to a credit reference agency for the purpose of identity and credit checks, and uses the information received regarding the statistical probability of payment default to make a balanced decision on the establishment, performance, or termination of the contractual relationship. The credit report may include probability values (score values) calculated on the basis of scientifically recognized mathematical-statistical methods, which may include address data in the calculation. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of conducting a credit check in preparation for entering into a contract. Processing is carried out on the basis of Art. 6(1)(f) GDPR, on the grounds of our overriding legitimate interest in protection against payment default where Klarna pays in advance. You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you, which is based on Art. 6(1)(f) GDPR, by notifying Klarna. Providing the data is necessary to conclude the contract using the payment method you have requested. Failure to provide the data means that the contract cannot be concluded using the payment method you have selected.
Further information, in particular on which credit reference agencies Klarna shares your personal data with, can be found for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/credit_rating_agencies.
General information about Klarna is available for Germany at: https://www.klarna.com/de/ and for Austria at https://www.klarna.com/at/. Your personal data is processed by Klarna in accordance with the applicable data protection regulations and as stated in Klarna’s privacy policy for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy.
Data collection and processing when registering to pay via Paymorrow
When paying via Paymorrow, personal data is transmitted to the payment service provider InterCard AG (Alstertor 9, 20095 Hamburg; "Paymorrow") and further processed there.
For the “Purchase on Invoice” payment method, Paymorrow checks whether the customer’s request to purchase on invoice can be accepted in view of any risks of non-payment or default on claims (acceptance check in accordance with risk policies), or whether another payment method should be used in coordination with the online shop operator. For this purpose, after the customer selects the “Purchase on Invoice” payment method, Paymorrow conducts its own acceptance check. This requires an identity, credit and creditworthiness check by the credit reference agencies listed below.When paying via Paymorrow, personal data is transmitted to the payment service provider InterCard AG (Alstertor 9, 20095 Hamburg; "Paymorrow") and further processed there.
For the “Pay in Installments” payment method, Paymorrow checks whether the customer’s request to pay in installments can be accepted in view of any risks of non-payment or default on claims (acceptance check in accordance with risk policies), or whether another payment method should be used in coordination with the online shop operator. For this purpose, after the customer selects the “Pay in Installments” payment method, Paymorrow conducts its own acceptance check. This requires a credit and identity check by the credit reference agencies listed below.
The data is processed for the purpose of offering the selected payment method and conducting the credit check required for it.The processing is carried out on the basis of Article 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.
As part of the identity check, you consent to your personal data being transmitted by Paymorrow to SCHUFA Holding AG (Kormoranweg 5, 65201 Wiesbaden; "SCHUFA") for the purpose of verifying your identity. SCHUFA will then transmit back to Paymorrow the degree of correspondence, expressed as a percentage, between the personal details it has stored and the personal details you have provided, as well as, where applicable, a notice of a previous identity verification based on an identification document conducted by SCHUFA or another contractual partner. Paymorrow can therefore use the correspondence rates transmitted to determine whether a person with the address you provided is recorded in SCHUFA’s database. No further data exchange or transmission of differing addresses takes place, and your data is not stored in SCHUFA’s database. Only the fact that the address was checked with SCHUFA is stored for evidentiary purposes.
The following personal data is required from you to carry out the creditworthiness check as part of the acceptance review: form of address, first and last names; place of residence (street, house number, postal code, town/city); date of birth; telephone number. The use, processing and disclosure of the aforementioned personal data by the online shop operator and Paymorrow, as well as the disclosure of this data by Paymorrow to the aforementioned credit reference agencies for the purpose of checking your creditworthiness, requires your consent.
You will therefore be asked during the ordering process to consent to the storage, processing and use of your personal data by the online shop operator or Paymorrow for the purpose of checking your creditworthiness and to the disclosure of this data to credit reference agencies, including the disclosure of data to third parties.
Paymorrow reserves the right to transfer personal data to service providers or financial partners commissioned by Paymorrow, or to grant them access to such data, for the purposes stated above, insofar as this is necessary for them to perform their tasks.
We fully respect the customer’s decision not to give consent. In this case, however, neither the online shop operator nor Paymorrow can accommodate the customer’s request to purchase on invoice.
For the purpose of creditworthiness checks, Paymorrow or partner companies commissioned by Paymorrow may, within the limits permitted by law and taking into account your respective legitimate interests in preventing the transmission or use of your data, transmit your address details to credit reference agencies for creditworthiness and credit checks when you register for purchase on invoice. We obtain information about the customer’s previous purchasing and payment behavior and creditworthiness information based on mathematical-statistical methods using address data (scoring - to calculate payment probabilities) for the purpose of creditworthiness and credit checks from the following credit reference agencies, which store data for providing information:
Bürgel, Bürgel Wirtschaftsinformationen GmbH & Co. KG, Gasstraße 18, D-22761 Hamburg, Tel.: +49 (0) 40 - 89 80 3 - 0, Fax: -777;
CEG, Creditreform Consumer GmbH, Hellersbergstr. 11, D-41460 Neuss, Tel.:+49(0)2131-109-501, Fax: -557;
Deltavista, Deltavista GmbH, Freisinger Landstr. 74, D-80939 München, Tel.: +49 (0)89 - 7244880, Fax: - 22;
infoscore Consumer Data GmbH, Data Protection Department, Rheinstraße 99, D-76532 Baden-Baden, Fax: +49 (7221) 5040-3201;
"Real" Inform GmbH, Normannenweg 32, 20537 Hamburg, Fax: +49 40 23 88 14-59.
You may request information about the data stored about you by the respective credit reference agencies from the agencies named. Data concerning the conclusion of the contract, the application, the commencement and/or termination of a contractual relationship may also be transmitted to the agencies named. The online shop operator / Paymorrow may also notify the agencies of any conduct that does not comply with the contract. The agencies store this data so that, upon credible demonstration of a legitimate interest, they can provide their contractual partners with information to assess customers’ creditworthiness or about a customer’s address for the purpose of locating debtors. Paymorrow ensures that the credit reference agencies named process and/or use your personal data exclusively for the purpose of “creditworthiness and credit checks.”
If your request for “payment in installments” has been accepted, you have the option of applying for the “payment in installments” payment method through Paymorrow’s partner bank. To do so, after successfully completing your order in the online shop, you will be redirected to the “Payment in Installments” offer in our customer portal. To use the service, you must follow the instructions in the “Payment in Installments” menu item. The “Payment in Installments” service is provided by our partner bank, Commerzfinanz GmbH.
When submitting your request to pay in installments, you provide Commerzfinanz GmbH with your first and last name, street, house number, postal code, city, date of birth, and telephone number for the purpose of concluding the credit agreement and processing payment for your online purchases in Paymorrow partner shops. Commerzfinanz GmbH requires this personal data to review and decide on your credit application for the installment payment method.
Providing the data is necessary to conclude the contract using the payment method you have selected. Failure to provide the data means that the contract cannot be concluded using the payment method you have selected.When submitting your request to pay in installments, you provide Commerzfinanz GmbH with your first and last name, street, house number, postal code, city, date of birth, and telephone number for the purpose of concluding the credit agreement and processing payment for your online purchases in Paymorrow partner shops. Commerzfinanz GmbH requires this personal data to review and decide on your credit application for the installment payment method.
Cookies
Our website uses cookies. Cookies are small text files that are stored in a user's computer system by or in the Internet browser. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.
Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your Internet browser, you can be notified before cookies are set and decide whether to accept them individually, as well as prevent cookies from being stored and the data they contain from being transmitted. Cookies that have already been stored can be deleted at any time. Please note, however, that you may then be unable to use all the functions of this website to their full extent.
You can find information at the links below on how to manage (including disable) cookies in the most popular browsers:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Technically necessary cookies
Unless otherwise stated below in this Privacy Policy, we use only these technically necessary cookies for the purpose of making our services more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after you navigate to another page and to offer you services. Some functions of our website cannot be offered without the use of cookies. These functions require the browser to be recognized again even after you navigate to another page.
The use of cookies or comparable technologies is based on § 25(2) TDDDG. Your personal data is processed on the basis of Art. 6(1)(f) GDPR, in pursuit of our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our services.
You have the right to object at any time to this processing of your personal data on grounds relating to your particular situation.
Use of the Shopify Consent Tool (Shopify Privacy & Compliance)We use the “Shopify Privacy & Compliance” consent tool provided by Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. Shopify is an affiliated company of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The tool enables you to give consent to data processing via the website, in particular to the placement of cookies, and to exercise your right to withdraw consent already given. The data is processed for the purpose of obtaining and documenting the necessary consent to data processing and thereby complying with legal obligations. Cookies may be used for this purpose. User information, including your IP address, is collected and transmitted to Shopify.
Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. An adequacy decision by the European Commission exists for Canada. An adequacy decision by the European Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those set out in the European Commission’s standard contractual clauses.
The data is processed to fulfill a legal obligation on the basis of Art. 6(1)(c) GDPR.
For more information about data protection at Shopify, please visit https://www.shopify.com/de/legal/datenschutz.
Analytics Advertising tracking
Use of Google Analytics 4
We use the Google Analytics web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data processing serves the purpose of analyzing this website and its visitors, as well as for marketing and advertising purposes. To this end, Google will use the information collected on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity, and provide the website operator with other services related to website and internet use.
This may include collecting the following information, among other things: IP address, date and time of the page visit, click path, information about the browser and device you use, pages visited, referrer URL (website from which you accessed our website), location data, and purchasing activities. Google may link your data with other data, such as your search history, personal accounts, usage data from other devices, and all other data Google has about you.
Google truncates the IP address beforehand within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area.
Your personal data is processed with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
The information generated thereby about your use of this website is generally transferred to and stored on a Google server in the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has thereby undertaken to comply with European data protection principles. Both Google and US government authorities have access to your data.
For more information about the terms of use and data protection, please visit https://policies.google.com/technologies/partner-sites and https://policies.google.com/privacy?hl=de&gl=de and at https://business.safety.google/privacy/.
Use of the Meta Pixel
We use the Meta Pixel of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta") on our website.
Meta and we are joint controllers for the collection of your data and the transfer of this data to Meta that take place when the service is integrated. The basis for this is an agreement between us and Meta on the joint processing of personal data, which specifies the respective responsibilities. The agreement is available at https://de-de.facebook.com/legal/terms/businesstools . In particular, we are responsible for fulfilling the information obligations under Articles 13 and 14 GDPR, for complying with the security requirements of Article 32 GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations under Articles 33 and 34 GDPR insofar as a personal data breach concerns our obligations under the agreement on joint processing. Meta is responsible for enabling data subjects to exercise their rights under Articles 15 - 20 GDPR, complying with the security requirements of Article 32 GDPR with regard to the security of the service, and fulfilling the obligations under Articles 33 and 34 GDPR insofar as a personal data breach concerns Meta's obligations under the agreement on joint processing.
The application serves the purpose of targeting website visitors with interest-based advertising on the Facebook and Instagram social networks. To this end, Meta's remarketing tag has been implemented on the website. When you visit the website, this tag establishes a direct connection to Meta's servers. This transmits to the Meta server which of our pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. When you visit the Facebook or Instagram social networks, you will then be shown personalized, interest-based ads.
The application also serves the purpose of generating conversion statistics. In this context, we learn the total number of users who clicked on one of our ads and were redirected to a page containing a conversion tracking tag, as well as which actions are taken after being redirected to this website. However, we do not receive any information that can personally identify users.
Your data may be transferred to the USA. The European Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself under the TADPF and thereby committed to complying with European data protection principles.
Your personal data is processed with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
You can disable the “Custom Audiences” remarketing feature here. For more information about the collection and use of data by Meta, your related rights and options for protecting your privacy, please see Meta's privacy policy at https://www.facebook.com/about/privacy/.
You can disable the “Custom Audiences” remarketing feature here. For more information about the collection and use of data by Meta, your related rights and options for protecting your privacy, please see Meta's privacy policy at https://www.facebook.com/about/privacy/.
Use of Google Ads conversion tracking
We use the online advertising program “Google Ads” on our website and, in this context, conversion tracking (visit action analysis). Google Conversion Tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an ad served by Google, a cookie for conversion tracking is placed on your computer. These cookies have a limited validity period, contain no personal data and are therefore not used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to that page. Each Google Ads customer receives a different cookie. Therefore, there is no possibility of tracking cookies across the websites of Ads customers.
The information collected with the help of the conversion cookie is used to compile conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page equipped with a conversion tracking tag. However, we do not receive any information that can personally identify users.
Your data may be transferred to Google LLC's servers in the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has thereby undertaken to comply with European data protection principles.
We use the online advertising program “Google Ads” on our website and, in this context, conversion tracking (visit action analysis). Google Conversion Tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an ad served by Google, a cookie for conversion tracking is placed on your computer. These cookies have a limited validity period, contain no personal data and are therefore not used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to that page. Each Google Ads customer receives a different cookie. Therefore, there is no possibility of tracking cookies across the websites of Ads customers.
The information collected with the help of the conversion cookie is used to compile conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page equipped with a conversion tracking tag. However, we do not receive any information that can personally identify users.
Your data may be transferred to Google LLC's servers in the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has thereby undertaken to comply with European data protection principles.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 (1) S. 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 (1) (a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent up to the time of withdrawal.
For more information and Google’s privacy policy, please visit: https://www.google.de/policies/privacy/ or https://business.safety.google/privacy/
For more information and Google’s privacy policy, please visit: https://www.google.de/policies/privacy/ or https://business.safety.google/privacy/
Use of the Remarketing or "Similar Audiences" feature of Google Inc.
We use the Remarketing or "Similar Audiences" feature of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This application serves the purpose of analyzing visitor behavior and interests. Google uses cookies to analyze website usage, which forms the basis for creating interest-based advertisements. The cookies record visits to the website and anonymized data about website usage. No personal data of website visitors is stored. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take into account product and information areas you previously viewed.
Your data may be transmitted to Google LLC servers in the USA. An adequacy decision by the European Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified under the TADPF and has thereby undertaken to comply with European data protection principles.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 (1) S. 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 (1) (a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent up to the time of withdrawal.
For more information about Google Remarketing and the associated privacy policy, please visit: https://www.google.com/privacy/ads/ and https://business.safety.google/privacy/
We use the Remarketing or "Similar Audiences" feature of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This application serves the purpose of analyzing visitor behavior and interests. Google uses cookies to analyze website usage, which forms the basis for creating interest-based advertisements. The cookies record visits to the website and anonymized data about website usage. No personal data of website visitors is stored. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take into account product and information areas you previously viewed.
Your data may be transmitted to Google LLC servers in the USA. An adequacy decision by the European Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified under the TADPF and has thereby undertaken to comply with European data protection principles.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 (1) S. 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 (1) (a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent up to the time of withdrawal.
For more information about Google Remarketing and the associated privacy policy, please visit: https://www.google.com/privacy/ads/ and https://business.safety.google/privacy/
Plug-ins and Other
Use of Google Tag Manager
We use Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This application is used to manage JavaScript tags and HTML tags, which are used to implement tracking and analytics tools in particular. The data processing serves the purpose of tailoring and optimizing our website to meet users’ needs.
Google Tag Manager itself does not store cookies, nor does it process personal data. However, it enables other tags to be triggered, which may collect and process personal data.
Further information on the terms of use and data protection can be found here.
Use of Google reCAPTCHAWe use Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This application is used to manage JavaScript tags and HTML tags, which are used to implement tracking and analytics tools in particular. The data processing serves the purpose of tailoring and optimizing our website to meet users’ needs.
Google Tag Manager itself does not store cookies, nor does it process personal data. However, it enables other tags to be triggered, which may collect and process personal data.
Further information on the terms of use and data protection can be found here.
We use the reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website as part of data processing under a data processing agreement. The query is intended to distinguish between input by a human and input by automated, machine processing. For this purpose, your input is transmitted to Google and further processed there. In addition, your IP address and, where applicable, other data required by Google for the reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and may also be transmitted to servers of Google LLC in the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 (1) S. 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 (1) (a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent up to the time of withdrawal.
Use of YouTube
We use the function for embedding YouTube videos provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”) on our website. YouTube is an affiliated company of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
The function displays videos hosted on YouTube in an iFrame on the website. The “Enhanced Privacy Mode” option is enabled. As a result, YouTube does not store any information about visitors to the website. Information is only transmitted to YouTube and stored there when you watch a video. Your data may be transferred to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 (1) S. 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 (1) (a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent up to the time of withdrawal.
For more information about the collection and use of data by YouTube and Google, your related rights and options for protecting your privacy, please see YouTube's privacy policy at https://www.youtube.com/t/privacy.
Embedding of the idealo logo
Our partner idealo's logo (idealo internet GmbH, Ritterstraße 11, 10969 Berlin) is embedded on our website. When you visit our website, the browser on your device automatically sends information to idealo's server. This information is temporarily stored in a so-called server log file for 7 days. The following information is collected without any action on your part and stored until it is automatically deleted:
- IP address of the requesting computer,
- date and time of access,
- name and URL of the file accessed,
- website from which access is made (referrer URL),
- browser used and, where applicable, your computer's operating system and the name of your access provider.
Use of Pushly
We use the Pushly plug-in from WebLab GmbH (Großbeerenstraße 169-171, 12277 Berlin; "Pushly") on our website.
The purpose of the data processing is to convert our online shop into an Android or iOS app. For this purpose, the following data of yours, which we receive in particular through your input during the ordering process, is transmitted to Pushly and temporarily stored on Pushly's servers within the EU: name, email address, customer ID, order number, payment method, billing and delivery address. Your data is not shared with any other third parties.
The processing of your personal data is carried out on the basis of Art. 6 para. 1 lit. f GDPR, in pursuit of our overriding legitimate interest in providing our services in a customer-oriented and user-friendly manner. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.
Further information about data protection at Pushly can be found at: https://www.pushly.de/datenschutz
Data subject rights and storage period
Storage period
After the contract has been fully performed, the data will initially be stored for the duration of the warranty period, then, taking into account statutory retention periods, in particular those under tax and commercial law, and will then be deleted once those periods have expired, unless you have consented to further processing and use.
Rights of the data subject
If the statutory requirements are met, you have the following rights pursuant to Art. 15 to 20 GDPR: the right of access, rectification, erasure, restriction of processing, and data portability.
Furthermore, pursuant to Art. 21(1) GDPR, you have the right to object to processing based on Art. 6(1)(f) GDPR, as well as to processing for the purposes of direct marketing.
Right to lodge a complaint with the supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.
You may lodge a complaint, among other things, with the supervisory authority responsible for us, which you can contact using the following details:
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
P.O. Box 20 04 44
40102 Düsseldorf
Tel.: +49 211 384240
Fax: +49 211 38424999
Email: poststelle@ldi.nrw.de
Right to object
If the personal data processing activities listed here are based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right to object to these processing activities at any time, on grounds relating to your particular situation, with effect for the future.
Once you have objected, the processing of the data concerned will cease, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims.
If personal data is processed for the purposes of direct marketing, you may object to this processing at any time by notifying us. Once you have objected, we will cease processing the data concerned for the purposes of direct marketing.